Privacy Policy
Introduction
Sanctum ("we", "us", "our") provides career growth and LinkedIn management services to senior professionals. This policy explains what information we collect, how we use it, and the choices you have. By using our services, you agree to the practices described here.
What data we collect
We collect the information you provide directly, including your resume, career history, target roles, and briefing responses, along with account access details for the platforms we manage on your behalf, and basic usage data from this website.
How we use your data
We use your information to deliver the services you've engaged us for: rewriting your resume, managing your LinkedIn presence, identifying opportunities, and reporting on results. We do not sell your data or share it with third parties for marketing purposes.
People we speak to on LinkedIn
If you reply to a message from our team on LinkedIn, or send us a service request there, we keep a record so we can answer you and follow up. It holds the details visible on your public LinkedIn profile (your name, job title, location, industry and profile link), your email address if you chose to share it with us, and our notes on the conversation. We do not buy contact lists, and we do not use software to collect profile data from LinkedIn: our team types in what they can see. The record is used only to reply to you and is seen only by our own team. We keep it while the conversation is active, and it is deleted automatically if nothing in the record has changed for 90 days, unless you become a client. You can ask us to delete it, or to stop contacting you, at any time by emailing us.
LinkedIn account access and handling
Where a package includes LinkedIn management, we use secure, encrypted access to post content and manage connections on your behalf. You retain full control of your account and can revoke our access at any time. Your credentials are never stored in plain text.
Data storage and security
Client data is stored on encrypted, access-controlled systems and retained only for as long as needed to deliver our services or as required by law. We apply industry-standard safeguards to protect against unauthorised access. Our team signs in with their Google account, and a single strictly necessary cookie keeps them signed in; it is not used for tracking.
Third-party services used
We use a limited number of trusted third-party services to run Sanctum: Vercel (website hosting), Supabase (our secure database), Google (sign-in for our team, and scheduling), PayPal (invoices and payments), and Resend (service emails), along with tools for analytics. Each is bound by its own data protection obligations, and we only share the minimum information required for them to function.
Your rights (GDPR / CCPA)
Depending on where you're based, you may have the right to access, correct, export, or delete your personal data, and to object to certain uses of it. To exercise any of these rights, contact us using the details below.
How to contact us
For any questions about this policy or how your data is handled, email us at hello@sanctum.myfinscope.com.